3 ms·
The bug bounty space is incredibly hostile because of the money involved. Just about every project has a bug bounty, but you'll be hard pressed to find any onl
by fooker 2y ago
The bug bounty space is incredibly hostile because of the money involved.
Just about every project has a bug bounty, but you'll be hard pressed to find any online discussion about works in progress towards a reportable bug.
- poincaredisk 2y agoProbably because vulnerability research is binary - you either have an exploitable bug out not. The fact that people write in depth about things they've found means a culture of openness, IMO.
- frosting1337 2y agoThis is true if you're not really known. (Un)fortunately you need a reputation: need to be able to walk the walk if you can talk the talk. Once you get over that hurdle, collaborating on targets is pretty common. Made $10k USD last month collaborating with someone in another country, in fact.